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REMARKS 



Claims 1, 3 to 1 1, 13 to 16, 18 to 23, 25 to 29, 31 to 34, and 36 to 40 are pending in this 
application, of which claims 1,11,16, 20, 23, 29, 34 and 38 are the independent claims. 
Favorable reconsideration and further examination are respectfully requested. 

Claims 1, 3 to 16, 18 to 23, 25 to 34, and 36 to 40 continue to stand rejected under 35. 
U.S.C § 102(b) over Gasser et al. (U.S. Patent No. 5,224,163). As shown above, Applicants 
have amended the independent claims to define the invention in greater clarity. In view of these 
amendments, withdrawal of the art rejection is respectfully requested. 

Amended independent claim 1 is directed to a method that includes receiving, from a 
delegator, a designation of a role and a delegate to assume the role; receiving, from a credential 
service provider, an indication that the designation is valid; generating a delegation credential in 
response to receiving the indication; receiving a request from the delegate for access to a service; 
providing the delegation credential in response to the request; and sending the delegation 
credential to a verification service that compares the selected delegation credential to permissible 
delegation credentials for the delegate. 

The applied art is not understood to disclose or suggest the foregoing features of claim 1 , 
particularly with respect to providing a delegation credential in response to a request from a 
delegate, and sending the delegation credential to a verification service that compares the 
selected delegation credential to permissible delegation credentials for the delegate. 

In this regard, Gassar describes a system in which a user, P, delegates to a workstation, 
Wl and/or W2, the ability to access files on his behalf. Delegation is performed via "delegation 
certificates", which are signed by a user's smart card, SC, and then provided to the appropriate 
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workstation. Session keys are also used to ensure that delegations are terminated throughout a 
chain of workstations to which responsibilities have been delegated. The smart card uses these 
keys to decode messages to confirm the identities of the workstations (see, e.g., column 15, lines 
1 7 et seq.). Gassar, however, does not disclose or suggest sending a delegation credential to a 
verification service that compares the selected delegation credential to permissible delegation 
credentials for the delegate. In this regard, Gassar does state that the system resource, Ws, 
receives and verifies delegation certificates (see, e.g., column 14, lines 15 to 17). However, this 
verification is simply verifying the validity of the certificates, not comparing the selected 
delegation credential to permissible delegation credentials for the delegate. 

For at least the foregoing reasons Applicants submit that claim 1 is patentable over 
Gassar. Independent claims 1 1, 23 and 29 contain features that are similar to those of claim 1, 
e.g., sending the delegation credential to a verification service that compares the selected 
delegation credential to permissible delegation credentials for the delegate. These claims are 
believed to be patentable for at least the same reasons noted above. 

Amended independent claim 16 defines a method that includes receiving, from a delegate, 
a value corresponding to a confirmation code and an identifier, where the confirmation code and 
the identifier correspond to a delegator, and the confirmation code is generated by a Web site 
visited by the delegate. The method also includes identifying the delegator using at least one of 
the identifier and the confirmation code; assigning, to the delegate, a delegation credential that 
corresponds to the delegator; and sending a message to the delegator indicating that the delegation 
credential has been assigned. 
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The applied art is not understood to disclose or to suggest the foregoing features of claim 
16, particularly with respect to receiving a confirmation code from a delegate, which is generated 
by a Web site visited by the delegate, and using the confirmation code to identify the delegate. 

In this regard, Applicants do not understand Gassar to describe a confirmation code used to 
identify a delegate. It was said in the office action (referencing claims 19 and 37) that column 5 
of Gassar describes a confirmation code. However, that section of Gassar does not deal with 
delegation. Columns 13 to 16 of Gassar address delegation (as does the summary). The 
delegation section of Gassar does not describe a confirmation code to identify a delegate. 
Notwithstanding this deficiency, Applicants have amended claim 16 to clarify that the 
confirmation code is generated by a Web site visited by the delegate. There is no mention 
whatsoever in Gassar of using a Web site to generate a confirmation code to identify a delegate. 

For at least the foregoing reasons, claim 16 is believed to be patentable over Gassar. 
Amended independent claims 20, 34 and 38 contain limitations that are similar to claim 16, e.g., 
receiving a confirmation code from a delegate, which is generated by a Web site visited by the 
delegate, and using the confirmation code to identify the delegate. These claims are also believed 
to be allowable for at least the same reasons noted above. 

In view of the foregoing amendments and remarks, Applicants submit that the entire 
application is now in condition for allowance. Such action is respectfully requested at the 
Examiner's earliest convenience. 

All correspondence should be directed to the below address. Applicants' attorney can be 
reached by telephone at the number shown below. 
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No fee is believed to be due for this Amendment; however, if any fees are due, please 
apply such fees to Deposit Account No. 06-1050 referencing Attorney Docket 10559-505001. 



Respectfully submitted, 



Date: 



^1 



Paul A. ] 'ysher 
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